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AMENDMENTS TO CLAIMS 

All prior claims 1-89 are cancelled without disclaimer. 

A new Listing of Claims 90-108 (7 pages) are on pages 8-14. 



-7" 



Application 10/679,971 in response to non-final Office Action dated February 9. 2007 

Listing of Claims; 

Claims 1-89 (Canceled) 

90 . (New) A method of securely distributing program instructions 
for execution in a single-chip secure cryptoprocessor that 
contains substantially unique identifier data that distinguishes 
different cryptoprocessor units, encryption circuitry for 
encrypting said identifier, decryption circuitry for decrypting 
encrypted digital program instructions, writable program memory 
for storing decrypted instructions, and processor core for 
executing said decrypted instructions which are inaccessible 
from said secure cryptoprocessor chip from locations outside of 
said chip after fabrication of said chip is completed; the 
method comprising: 

(a) encrypting in a network server a first program of executable 
digital instructions under control of a first encryption key; 

(b) transmitting said encrypted first program of digital instructions 
from said server to said cryptoprocessor; 

(c) encrypting said xinique identifier in said cryptoprocessor chip 
to produce an encrypted identifier; 

(d) transmitting said encrypted identifier to said server; 

(e) reencrypting in said server said \mique identifier together with 
a decryption key corresponding to said first encryption key to 
produce at least one encrypted data block; 

(f ) transmitting said data block to said cryptoprocessor chip; 

(g) decrypting said encrypted data block in said ciryptoprocessor 
chip to produce a decrypted identifier and said decryption key 
in said cryptoprocessor chip; 

(h) decrypting said enc3:ypted first program in said cryptoprocessor 
chip under control of said decryption key to produce executable 
digital instructions stored in said program memory; and 

(i) executing said digital instructions in said processor core in 
said cryptoprocessor chip to generate output data if said 
decrypted identifier has a predetermined relationship with said 
unique identifier in said cryptoprocessor chip, 
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91. (New) The method of claim 90, further comprising the steps of 
(j) generating a session key in said server; 

(k) transmitting said session key in encrypted form to said 
cryp toproces sor ; 

(1) decrypting said encrypted session key in said cryptoprocessor 

chip to produce a decrypted session key; 
(m) encrypting said unique identifier in said cryptoprocessor chip 

under control of said decrypted session key to produce said 

encrypted identifier; and 
(n) decrypting said encrypted identifier in said server under 

control of said session key to produce a decrypted identifier. 

92. (New) The method of claim 90, wherein said cryptoprocessor chip 
is a component in a video game system and said output data 
generated by said cryptoprocessor is game data that is processed 
by a graphics co-processor in said game system that generates 
graphics data for display on a display device. 

93. (new) The method of claim 90, wherein said cryptoprocessor chip 
is a component in a manually removable memory device for use in 
a video game system and said output data generated by said 
cryptoprocessor is game data that is processed by a graphics 
co-processor in said game system that generates graphics data 
for display on a display device. 

94. (New) The method of claim 90, wherein said cryptoprocessor chip 
is a component in a computer and said output data generated by 
said cryptoprocessor is address data that identifies memory 
locations of non-encrypted program instructions executed by a 
second processor in said computer. 



95. (New) The method of claim 90, wherein said cryptoprocessor chip 
is a component in a manually removable device for use with a 
computer system. 

96. (New) The method of claim 90, wherein said cryptoprocessor chip 
communicates with a second processor through a data transmission 
path that comprises wireless transmission. 

97. (New) The method of claim 90, wherein said cryptoprocessor chip 
inhibits output of said executable digital instructions from 
said data menory to a location outside of said secure 
cryptoprocessor chip. 

98. (New) The method of claim 90, wherein said output data generated 
by said cryptoprocessor contain instructions that are executed 
by a second processor. 

99. (New) The method of claim 90, further comprising the step of 
downloading said encrypted first program of executable digital 
instructions and said encrypted data block through a retailer 
computer. 
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100 . (New) A coitputer readable data storage medium having stored 

thereon encrypted digital program instructions for execution in 
a single-chip secure cryptoprocessor that contains substantially 
■ unique identifier data that distinguishes different cryptoprocessor 
units, encryption circuitry for encrypting said identifier, 
decryption circuitry for decrypting encrypted digital program 
instructions, writable program memory for storing decrypted 
instructions, and processor core for executing said decrypted 
instructions which are inaccessible from said secure 
cryptoprocessor chip from locations outside of said chip after 
fabrication of said chip is completed, wherein said 
cryptoprocessor chip performs the following: 

(a) encrypting said unique identifier in said cryptoprocessor 
chip to produce an encrypted identifier for transmission to 

a network server that encrypts and downloads a first program of 
executable digital instructions for use in said cryptoprocessor, 
wherein said server decrypts said encrypted identifier to 
produce a decrypted identifier, and wherein said server 
reencrypts said decrypted identifier together with a decryption 
key corresponding to said encrypted first program to produce 
at least one encrypted data block for transmission to said 
cryptoprocessor chip; 

(b) decrypting said encrypted data block in said cryptoprocessor 
chip to produce a decryption key in said cryptoprocessor chip; 

(c) decrypting said encrypted first program in said cryptoprocessor 
chip \inder control of said decryption key to produce executable 
digital instructions stored in said program memory; and 

(d) executing said digital instructions in said processor core in 
said cryptoprocessor chip to generate output data if said 
decrypted identifier has a predetermined relationship with said 
unique identifier in said cryptoprocessor chip. 



-11- 



101. (New) The data storage medixjin of claim 100, further storing 
nonencrypted digital program instructions for execution in 

a second processor that processes said output data from said 
cryptoprocessor chip and generates second data that is processed 
by said cryptoprocessor chip . 

102. (New) The data storage mediiam of claim 100, further storing 
said encrypted data block in said data storage medium. 

103. (New) The data storage medium of claim 100, wherein said data 
storage medivmi and said cryptoprocessor chip are housed in a 
device that is removably connected to a computer during decryption 
of said encrypted program instructions . 
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104. (New) A single-chip secure cryptoprocessor comprising: 

(a) non-volatile data memory storing substantially unique identifier 
data that distinguishes different cryptoprocessor chips; 

(b) encryption circuitry for encrypting said unique identifier to 
produce an encrypted identifier for transmission to a network 
server; 

(c) wherein said server encrypts and downloads a first program of 
executable digital instructions for use in said cryptoprocessor, 
wherein said server decrypts said encrypted identifier to 
produce a decrypted identifier, and wherein said server 
reencrypts said decrypted identifier together with a digital 
decryption key corresponding to said encrypted first program 
to produce at least one encrypted data block for use in said 
cryptoprocessor chip; 

(d) decryption circuitry for decrypting said encrypted data block 
to produce a decrypted key; 

(e) writable data memory for storing said decrypted key; 

(f ) decryption circuitry for decrypting said first program iinder 
control of said decrypted key to produce executable digital 
decrypted instructions; 

(g) writable program memory for storing said decrypted instructions; 
and 

(h) processor core for executing said decrypted instructions 
to produce output data if said decrypted identifier has a 
predetermined relationship with said unique identifier; 

(i) wherein said data memory, encryption circuitry, decryption 
circuitry, processor core, program memory, and decrypted 
instructions are inaccessible from said secure cryptoprocessor 
chip from locations outside of said secure cryptoprocessor chip 
after fabrication of said chip is completed. 
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105. (New) The cryptoprocessor chip of claim 104, wherein said 
cryptoprocessor chip coininunicates with a second processor 
through a data transmission link that comprises wireless 
transmission . 

106. (New) The cryptoprocessor chip of claim 104, wherein said 
output data is processed by a second processor in one of the 
group comprising: a video game system, a handheld game system, 
and a computer. 

107. (New) The cryptoprocessor chip of claim 104, wherein said 
cryptoprocessor chip is a component in one of the group 
comprising: a video game system, a handheld game system, and 
a computer. 

108. (New) The cryptoprocessor chip of claim 104, wherein said 
writable program memory is non-volatile. 
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